Security Basics mailing list archives
RE: Spy Software
From: "Michael Parker" <mparker () rim net>
Date: Fri, 11 Apr 2003 12:28:17 -0400
I installed a full pirated copy of this one once for "evaluation purposes". Much to my surprise, even though I had entered a serial number and opted not to register and specifically chose not to obtain any upgrades or signatures, I received an email a day or so later that the software was not a legal copy and to uninstall it. Obviously the software has some ability to "phone home". I tried a few of these utilities and they are kinda scary...Blazing Tools Perfect Key Logger and Iopus Starr Pro. Once I got that email I uninstalled the software and went crazy getting software to detect any further "Spyware". The problem is now that some of the spyware uses "Black Code" to prevent "spyware detectors" from working properly (unfortunately I can't find the document that provided that info). Regards, Michael -----Original Message----- From: Richard Pachito [mailto:alpyha () prodigy net] Sent: April 10, 2003 7:35 PM To: security-basics () securityfocus com Subject: Spy Software Hello, I administer workstations for a small company and the boss recently asked me to isntall sofware called "Spector Pro". It is a 'spy' utility that captures keystrokes, e-mails, instant-messages (YIM,AIM,ICQ), and takes screen shots every X amount of time. What I was wondering is how exactly does this program hide itself in the system. I've called their techs a few times to end with a repsonse of 'we are not authorized to disclose such information'. The recorded data is saved in a C:\winnt\system32\netext\ folder but no exec. There is nothing unusual listed in Task Manager that would lead me to the application running in the background. Would anyone happen to know how exactly this application works. I believe a user would have the right to know what is running on their system, and I'm kinda ticked off that Spector Soft denys such information. ------------------------------------------------------------------- Is SPAM over-loading your e-mail server, disk space or bandwidth? SurfControl E-Mail Filter is flexible, intelligent and policy-driven protection. http://www.securityfocus.com/SurfControl-security-basics2 Download your free fully functional trial, complete with 30-days of free technical support. Stop SPAM before it stops you. ------------------------------------------------------------------- ------------------------------------------------------------------- Is SPAM over-loading your e-mail server, disk space or bandwidth? SurfControl E-Mail Filter is flexible, intelligent and policy-driven protection. http://www.securityfocus.com/SurfControl-security-basics2 Download your free fully functional trial, complete with 30-days of free technical support. Stop SPAM before it stops you. -------------------------------------------------------------------
Current thread:
- Spy Software Richard Pachito (Apr 11)
- Re: Spy Software Jeffrey S. Sims (Apr 12)
- RE: Spy Software Seth Connolly (Apr 12)
- <Possible follow-ups>
- RE: Spy Software Clark, Steve (Apr 12)
- RE: Spy Software CHRIS GRABENSTEIN (Apr 12)
- RE: Spy Software Michael Parker (Apr 12)
- RE: Spy Software Cirelli, Keith(LBS) (Apr 12)
- RE: Spy Software David Moisan (Apr 14)
- Re: Spy Software Jon Pastore (Apr 14)
- Re: Spy Software H Carvey (Apr 12)
- Re: Spy Software Mark Ng (Apr 14)
- Re: Spy Software Harlan Carvey (Apr 14)
- Re: Spy Software mobilejimbo (Apr 15)
- Re: Spy Software Mark Ng (Apr 16)
- Re: Spy Software mobilejimbo (Apr 16)
- RE: Spy Software D. Weiss (Apr 17)
- Re: Spy Software Mark Ng (Apr 14)